This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
File:                     mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json)
Hash identifier:          Hd5T33TnmutdiaoqD4JxTTzwixXSjUyzC1G25PGK2P8=
Subject key identifier:   8B:E2:52:EB:FF:BC:29:A3:2F:28:39:8F:FC:FD:B4:02:79:1F:F4:52
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Certificate issuer:       /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial:       057B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
Manifest number:          0553
Signing time:             Sat 24 Jan 2026 22:43:18 +0000
Manifest this update:     Sat 24 Jan 2026 22:43:18 +0000
Manifest next update:     Sat 31 Jan 2026 22:43:18 +0000
Files and hashes:         1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: FBDK7flgfG7dNciL+XQY84r6mvcAiSJkASr0Ac4IGTg=)
                          2: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: O4d2rjcxKIku+xiW/1KGQUyVAJ12dGdhkkO9KRL1EOw=)
                          3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: 1dqO6r+A2uTRxInxtjkWF1ndg9y4kX4fvagqEnUInnM=)
                          4: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: ZIrhP9UDAVYRNfKeRGlyTPy785zmXCzmRz3nPy9yy2g=)
                          5: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: FkiL6AOguV/ODkMs4HRo/0ifEPFjnGb8m2pRQF54UiY=)
                          6: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: 4Had5FY4pwFyUD0aCqgDusTgRp2pErIXiEruwD2H9Yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
                          rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
        Validity
            Not Before: Jan 24 22:43:18 2026 GMT
            Not After : Jan 31 22:43:18 2026 GMT
        Subject: CN=69754b06-0545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:57:50:f1:1f:60:16:b5:6b:79:2c:9b:f8:
                    67:23:04:a0:be:42:1e:c2:72:35:bc:85:17:62:44:
                    53:dc:ec:d3:03:9e:63:ef:ff:09:f7:1b:83:a1:14:
                    15:b4:f1:00:5c:78:7c:b8:d5:db:ca:5e:99:55:ed:
                    f4:4f:e1:cb:34:b6:63:db:77:ab:63:58:9e:ed:6e:
                    e7:dc:0a:f8:c5:a0:af:ed:3f:ba:7a:37:c0:e8:61:
                    3b:d9:98:fb:54:75:49:98:cf:aa:a5:f2:a7:d1:ae:
                    b4:cd:74:a5:3c:a7:19:10:40:eb:49:41:e8:4b:67:
                    61:11:9b:38:88:6e:93:02:2c:5c:71:1c:55:9a:d3:
                    7a:a9:0e:ce:47:da:48:5f:7c:f5:d9:bd:c0:e7:ab:
                    dd:ec:ab:13:30:ec:b1:60:e5:32:49:25:40:9f:aa:
                    cd:b2:b6:9f:bb:81:49:0a:62:8e:22:92:d7:6c:20:
                    fd:db:22:65:03:30:32:b9:4e:ad:e6:11:4b:0f:c1:
                    53:4a:a0:c4:73:34:2d:e3:35:19:f4:bf:ff:46:6c:
                    e3:a5:82:33:f2:79:b9:0e:71:f9:af:48:c6:ff:7f:
                    f1:b2:d4:65:85:9e:d5:1f:45:af:95:04:75:f5:81:
                    1e:76:ba:18:ae:ea:7f:9a:33:8e:4d:a6:04:7f:e4:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E2:52:EB:FF:BC:29:A3:2F:28:39:8F:FC:FD:B4:02:79:1F:F4:52
            X509v3 Authority Key Identifier:
                keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:da:a9:62:1c:a6:aa:92:6b:ee:18:b4:27:12:fd:69:70:
         38:a8:71:9d:0e:a5:cc:62:fe:49:a4:bb:af:36:8d:a5:20:fb:
         72:ed:40:de:95:74:ce:77:aa:51:64:ff:da:ff:03:c1:ca:2f:
         fb:74:99:27:e1:76:61:d2:46:a9:36:99:7c:9f:3f:3b:57:45:
         3c:91:91:ce:fa:f9:b3:5b:62:db:4d:95:12:a4:81:c1:be:f6:
         f8:d6:cb:5f:92:04:a2:7c:7b:2e:6e:63:90:4e:45:66:8a:74:
         7d:30:ed:65:35:08:34:bf:1f:ef:f8:34:8f:36:9e:ab:97:a4:
         aa:f7:18:0c:cc:7a:bd:69:31:11:e5:4c:66:e7:ec:7e:eb:6f:
         43:fb:cb:cf:c8:60:03:47:87:eb:52:58:2c:11:56:64:1b:59:
         87:60:81:21:ff:87:8f:e5:3c:4d:86:78:77:4c:0a:33:cf:33:
         6d:f1:50:32:95:e8:8a:f2:0d:28:8b:93:c1:86:30:22:df:c4:
         eb:cb:09:0a:84:f8:08:1d:7d:54:1b:27:0b:ed:1f:7a:4f:2d:
         41:b2:3f:0d:e0:4b:2d:fd:ef:8c:02:4d:33:37:6e:72:5a:8e:
         67:66:1f:0a:21:17:50:2d:64:04:3a:66:3b:6a:6a:17:34:56:
         8c:86:a6:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3
MTRBRDM2RjUwHhcNMjYwMTI0MjI0MzE4WhcNMjYwMTMxMjI0MzE4WjAYMRYwFAYD
VQQDDA02OTc1NGIwNi0wNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYNXUPEfYBa1a3ksm/hnIwSgvkIewnI1vIUXYkRT3OzTA55j7/8J9xuDoRQV
tPEAXHh8uNXbyl6ZVe30T+HLNLZj23erY1ie7W7n3Ar4xaCv7T+6ejfA6GE72Zj7
VHVJmM+qpfKn0a60zXSlPKcZEEDrSUHoS2dhEZs4iG6TAixccRxVmtN6qQ7OR9pI
X3z12b3A56vd7KsTMOyxYOUySSVAn6rNsrafu4FJCmKOIpLXbCD92yJlAzAyuU6t
5hFLD8FTSqDEczQt4zUZ9L//RmzjpYIz8nm5DnH5r0jG/3/xstRlhZ7VH0WvlQR1
9YEedroYrup/mjOOTaYEf+TSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIviUuv/
vCmjLyg5j/z9tAJ5H/RSMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC
MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1
LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1PtqpYhymqpJr7hi0JxL9aXA4qHGdDqXMYv5JpLuvNo2lIPty7UDe
lXTOd6pRZP/a/wPByi/7dJkn4XZh0kapNpl8nz87V0U8kZHO+vmzW2LbTZUSpIHB
vvb41stfkgSifHsubmOQTkVminR9MO1lNQg0vx/v+DSPNp6rl6Sq9xgMzHq9aTER
5Uxm5+x+629D+8vPyGADR4frUlgsEVZkG1mHYIEh/4eP5TxNhnh3TAozzzNt8VAy
leiK8g0oi5PBhjAi38TrywkKhPgIHX1UGycL7R96Ty1Bsj8N4Est/e+MAk0zN25y
Wo5nZh8KIRdQLWQEOmY7amoXNFaMhqa7
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:35 2026 by rpki-client